Nekochan Net

How secure are yours? I use something everyone who mastered grammar school certainly knows about. Still, hackers would have a rather hard time to crack it, for sure...

After the recent Gawker.com password fiasco, I've been refreshing many of my accounts with a range of new passwords.

I didn't think that I'd be affected by the Gawker problems, since I don't remember ever signing into or caring about the site, but it turns out that they own a bunch of other sites and use the same authentication system for all of them. I made a comment on one of them, Lifehacker.com, years ago, and I used that username/password pair on a bunch of non-essential sites, so my credentials were compromised.

My trick is to start with a phrase I'll easily remember, like:

Oh no you don't!

Then start mangling by replacing letters with numbers or symbols that look similar as well. The trick is to use the conversion inconsistantly;

0h_nO-Y0u_d0N'T!

The other trick is to try several variations until you find a combination that rolls off your fingers well.

Geof

_________________
--
+MacPro +Sun Ultra 40 +G4 MDD +G4 Cube +G3 B&W +MacBook Air +iPad +Amiga 3000 +Amiga 2000 Toaster

for online accounts i only use generated stuff as well as for local services that can be reached from the outside

_________________
r-a-c.de

Well, just write down your password in this thread, and we'll tell you if they are strong enough, for free! Aren't we kind hearts?

_________________
R4000 R4400 R4400 R8000 R10000 R4000PC R4000SC R5000SC R5000 RM7000 2xR10000 R12000 - 2x2xR10000 R16000
among more than 150 machines : Apollo, Be, Data General, Digital, HP, IBM, MIPS before SGI, Motorola, NeXT, SGI, Solbourne, Sun...

Hey, foetz, great to see you here again!

Do you use a password manager to "remember" the generated passwords? If so, is there a particular one that you recommend?

pi=4,25?

The main reason I don't use generated password is they are too hard to remember. If they are phrase based, I can make them relatively easy to remember. I used to play the middle row of the keyboard (asdfghjkl) into the white keys of a piano (cdefgabcd) with the upper row (we-tyu-op) into black keys (c#d#-f#g#a#-c#d#) and the make my passwords into musical motifs. For instance, in C-major, the password 'adgfdsasaaasssdddfasdfdfghghjk' is the main theme of Beethovens 5th symphony, 4th movement. The musical approach was basically to build long passwords that where easily remembered. Unfortunately, many system now require mixed upper/lower/number/symbols which makes the musical approach harder. If I can't remember a password, and have to lookitup, it's not very useful to me.

Geof

_________________
--
+MacPro +Sun Ultra 40 +G4 MDD +G4 Cube +G3 B&W +MacBook Air +iPad +Amiga 3000 +Amiga 2000 Toaster

I think this comic sums up my thoughts on the matter.

_________________

<- MicroVAX 3500 <- DECsystem 5500 <- MicroVAX 3300
Pictures of my collection: www.pdp8.se

Definitely too weak.

Try using ``pi=14.3'' instead.

_________________
R4000 R4400 R4400 R8000 R10000 R4000PC R4000SC R5000SC R5000 RM7000 2xR10000 R12000 - 2x2xR10000 R16000
among more than 150 machines : Apollo, Be, Data General, Digital, HP, IBM, MIPS before SGI, Motorola, NeXT, SGI, Solbourne, Sun...

A root password on a well-used machine here at school was "ribbed for her pleasure"

I use random goobledygook numbers+letters...

_________________
(Maradona) (DavidVilla) A1186 (Xavi)
A1370 (Messi) dp43tf (Puyol) A1387 (Abidal) A1408 (Guardiola)

"InfiniteReality Graphics - Power Through Complexity"

much thanks

of course those kinds of passes have to be written somwhere and my intranet db is just the right place for that. it's platform independent and i can access it in all kinds of ways.
currently running with mysql and as simple as possible. looks like that:

just an example but something like that does the job for me

_________________
r-a-c.de

I tend to use passwords that are 22 characters long. I know it is a pain, but it gets the job done.

_________________
DELL Inspiron 15R 3.2GHz 16GB RAM ATI7730M/Intel HD4000 750GB Windows 8

Keep in mind that many systems, including IRIX 6.5, only recognize the first eight characters of a password.

9 character, mixed case alpha, numerical, with special characters. One for each account kept in my head via muscle memory.

_________________


DECUS Member 368596